CVE-2014-2715
VideoWhisper 7 Cross Site Scripting
Severity Score
4.3
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Multiple cross-site scripting (XSS) vulnerabilities in vwrooms\templates\logout.tpl.php in the VideoWhisper Webcam plugins for Drupal 7.x allow remote attackers to inject arbitrary web script or HTML via the (1) module or (2) message parameter to index.php.
Múltiples vulnerabilidades de XSS en vwrooms\templates\logout.tpl.php en los plugins VideoWhisper Webcam para Drupal 7.x permiten a atacantes remotos inyectar script Web o HTML arbitrarios a través del parámetro (1) module o (2) message hacia index.php.
VideoWhisper version 7 for Drupal suffers from a cross site scripting vulnerability.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2014-04-01 CVE Reserved
- 2014-04-25 CVE Published
- 2023-03-07 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CAPEC
References (3)
| URL | Tag | Source |
|---|---|---|
| http://secunia.com/advisories/58306 | Third Party Advisory | |
| http://www.securityfocus.com/archive/1/531935/100/0/threaded | Mailing List | |
| http://www.securityfocus.com/bid/67069 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Videowhisper Search vendor "Videowhisper" | Videowhisper Search vendor "Videowhisper" for product "Videowhisper" | 7.x-1.0 Search vendor "Videowhisper" for product "Videowhisper" and version "7.x-1.0" | drupal |
Affected
| ||||||
| Videowhisper Search vendor "Videowhisper" | Videowhisper Search vendor "Videowhisper" for product "Videowhisper" | 7.x-1.1 Search vendor "Videowhisper" for product "Videowhisper" and version "7.x-1.1" | drupal |
Affected
| ||||||
| Videowhisper Search vendor "Videowhisper" | Videowhisper Search vendor "Videowhisper" for product "Videowhisper" | 7.x-1.3 Search vendor "Videowhisper" for product "Videowhisper" and version "7.x-1.3" | drupal |
Affected
| ||||||
| Videowhisper Search vendor "Videowhisper" | Videowhisper Search vendor "Videowhisper" for product "Videowhisper" | 7.x-1.x Search vendor "Videowhisper" for product "Videowhisper" and version "7.x-1.x" | dev, drupal |
Affected
| ||||||